zammad-client.json 3.5 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122
  1. {
  2. "clientId": "#ZAMMAD_BASE_URL/auth/saml/metadata",
  3. "name": "Zammad",
  4. "description": "",
  5. "surrogateAuthRequired": false,
  6. "enabled": true,
  7. "alwaysDisplayInConsole": false,
  8. "clientAuthenticatorType": "client-secret",
  9. "secret": "sgExDFx8OGfCooRBwDYLIV5NnDAzVBey",
  10. "redirectUris": [
  11. "#ZAMMAD_BASE_URL/auth/saml/callback"
  12. ],
  13. "webOrigins": [
  14. "#ZAMMAD_BASE_URL"
  15. ],
  16. "notBefore": 0,
  17. "bearerOnly": false,
  18. "consentRequired": false,
  19. "standardFlowEnabled": true,
  20. "implicitFlowEnabled": false,
  21. "directAccessGrantsEnabled": false,
  22. "serviceAccountsEnabled": false,
  23. "publicClient": false,
  24. "frontchannelLogout": true,
  25. "protocol": "saml",
  26. "attributes": {
  27. "client.secret.creation.time": "1670334049",
  28. "saml.force.post.binding": "true",
  29. "saml.encrypt": "false",
  30. "post.logout.redirect.uris": "+",
  31. "saml_assertion_consumer_url_post": "#ZAMMAD_BASE_URL/auth/saml/callback",
  32. "saml.server.signature": "true",
  33. "saml.server.signature.keyinfo.ext": "false",
  34. "saml.artifact.binding.identifier": "j8oyl9s6Zci93v0jdlB0lEAYaEU=",
  35. "saml_single_logout_service_url_redirect": "#ZAMMAD_BASE_URL/auth/saml/slo",
  36. "saml.signature.algorithm": "RSA_SHA256",
  37. "saml_force_name_id_format": "false",
  38. "saml.client.signature": "false",
  39. "saml.authnstatement": "true",
  40. "saml_name_id_format": "email",
  41. "saml.allow.ecp.flow": "false",
  42. "saml_signature_canonicalization_method": "http://www.w3.org/2001/10/xml-exc-c14n#"
  43. },
  44. "authenticationFlowBindingOverrides": {},
  45. "fullScopeAllowed": true,
  46. "nodeReRegistrationTimeout": -1,
  47. "protocolMappers": [
  48. {
  49. "name": "first_name",
  50. "protocol": "saml",
  51. "protocolMapper": "saml-user-attribute-mapper",
  52. "consentRequired": false,
  53. "config": {
  54. "attribute.nameformat": "Basic",
  55. "user.attribute": "firstName",
  56. "aggregate.attrs": "false",
  57. "friendly.name": "Given name",
  58. "attribute.name": "first_name"
  59. }
  60. },
  61. {
  62. "name": "email",
  63. "protocol": "saml",
  64. "protocolMapper": "saml-user-attribute-mapper",
  65. "consentRequired": false,
  66. "config": {
  67. "attribute.nameformat": "Basic",
  68. "user.attribute": "email",
  69. "aggregate.attrs": "false",
  70. "friendly.name": "Email address",
  71. "attribute.name": "email"
  72. }
  73. },
  74. {
  75. "name": "uid",
  76. "protocol": "saml",
  77. "protocolMapper": "saml-user-attribute-mapper",
  78. "consentRequired": false,
  79. "config": {
  80. "user.attribute": "uid",
  81. "aggregate.attrs": "false",
  82. "friendly.name": "Unique Identifier",
  83. "attribute.name": "uid"
  84. }
  85. },
  86. {
  87. "name": "name",
  88. "protocol": "saml",
  89. "protocolMapper": "saml-user-attribute-mapper",
  90. "consentRequired": false,
  91. "config": {
  92. "attribute.nameformat": "Basic",
  93. "user.attribute": "username",
  94. "aggregate.attrs": "false",
  95. "friendly.name": "Full name",
  96. "attribute.name": "name"
  97. }
  98. },
  99. {
  100. "name": "last_name",
  101. "protocol": "saml",
  102. "protocolMapper": "saml-user-attribute-mapper",
  103. "consentRequired": false,
  104. "config": {
  105. "attribute.nameformat": "Basic",
  106. "user.attribute": "lastName",
  107. "aggregate.attrs": "false",
  108. "friendly.name": "Family name",
  109. "attribute.name": "last_name"
  110. }
  111. }
  112. ],
  113. "defaultClientScopes": [
  114. "role_list"
  115. ],
  116. "optionalClientScopes": [],
  117. "access": {
  118. "view": true,
  119. "configure": true,
  120. "manage": true
  121. }
  122. }